CVE-2025-10820
MediumCVSS 4.3Exploitation Probability (EPSS)
Low risk28th percentile - higher than 28% of all known CVEs
Summary
A vulnerability was detected in fuyang_lipengjun platform 1.0. It impacts the function TopicController of the file /topic/queryAll. The manipulation results in improper authorization. The attack can be executed remotely. The exploit is now public and may be used.
Risk Assessment
Risk of unauthorized access to topic management functions, potentially leading to data disclosure or modification. A remote attack could compromise system integrity.
Recommendation
Apply vendor patches or restrict access to /topic/queryAll. Implement proper authorization controls for the TopicController function.
Other vulnerabilities in fuyang_lipengjun platform
See all- CVE-2025-10822Medium
A vulnerability has been found in fuyang_lipengjun platform 1.0. The impacted element is the function SysSmsLogController of the file /sys/smslog/queryAll. Such manipulation leads to improper authorization. The attack may be performed remotely. The exploit has been disclosed to the public and may be used.
- CVE-2025-10821Medium
A flaw has been found in fuyang_lipengjun platform 1.0. The affected element is the function TopicCategoryController of the file /topiccategory/queryAll. This manipulation causes improper authorization. The attack is possible to be carried out remotely. The exploit has been published and may be used.
- CVE-2025-10819Medium
A vulnerability was detected in the fuyang_lipengjun platform 1.0 in the UserCouponController function of /usercoupon/queryAll. Manipulation leads to improper authorization, and the attack can be performed remotely. The exploit has been publicly disclosed and may be used.
Original NVD description (English source)
A vulnerability was detected in fuyang_lipengjun platform 1.0. Impacted is the function TopicController of the file /topic/queryAll. The manipulation results in improper authorization. The attack can be executed remotely. The exploit is now public and may be used.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS